Latest vulnerabilities for "ibm agentics"

Where

Sort:

Versions

1.0

IBM Db2 Genius Hub29 vulnerabilities

First published (updated )

Advisory

IBM-7279901

Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub

Risk 22

Severity

4.3

First published (updated )

CVE-2026-14501

React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation

Risk 40

Severity

6.6

First published (updated )

CVE-2026-40181

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Risk 38

Severity

6.1

First published (updated )

CVE-2026-27136

Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html

Risk 37

Severity

6.5

First published (updated )

CVE-2026-25680

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

Risk 38

Severity

6.1

First published (updated )

CVE-2026-42502

Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html

Risk 38

Severity

6.1

First published (updated )

CVE-2026-42506

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Risk 38

Severity

6.1

First published (updated )

CVE-2026-25681

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Risk 68

Severity

First published (updated )

CVE-2026-39821

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Risk 47

Severity

7.5

First published (updated )

CVE-2026-39829

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Risk 88

Severity

First published (updated )

CVE-2026-46595

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Risk 71

Severity

9.1

First published (updated )

CVE-2026-39830

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

Risk 29

Severity

5.3

First published (updated )

CVE-2026-46598

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Risk 71

Severity

9.1

First published (updated )

CVE-2026-42508

Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

Risk 41

Severity

6.5

First published (updated )

CVE-2026-39827

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Risk 71

Severity

9.1

First published (updated )

CVE-2026-39834

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Risk 71

Severity

9.1

First published (updated )

CVE-2026-39831

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

Risk 71

Severity

9.1

First published (updated )

CVE-2026-39833

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Risk 47

Severity

7.5

First published (updated )

CVE-2026-39835

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Risk 85

Severity

8.8

First published (updated )

CVE-2026-39828

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Risk 71

Severity

9.1

First published (updated )

CVE-2026-39832

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Risk 47

Severity

7.5

First published (updated )

CVE-2026-46597

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Risk 33

Severity

6.9

First published (updated )

CVE-2026-45409

brace-expansion: Large numeric range defeats documented `max` DoS protection

Risk 43

Severity

7.5

First published (updated )

CVE-2026-45149

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

Risk 41

Severity

8.2

First published (updated )

CVE-2026-44431

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Risk 46

Severity

7.5

First published (updated )

CVE-2026-33814

RedisBloom RESTORE invalid memory access may allow remote code execution

Risk 83

Severity

7.7

First published (updated )

CVE-2026-25589

redis-server RESTORE invalid memory access may allow remote code execution

Risk 84

Severity

7.7

First published (updated )

CVE-2026-25243

redis-server Lua use-after-free may allow remote code execution

Risk 84

Severity

6.1

First published (updated )

CVE-2026-23631

redis-server use-after-free in unblock client flow may allow remote code execution

Risk 84

Severity

7.7

First published (updated )

CVE-2026-23479

Trending

Versions

IBM Db2 Genius Hub29 vulnerabilities

Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub

React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

brace-expansion: Large numeric range defeats documented `max` DoS protection

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

RedisBloom RESTORE invalid memory access may allow remote code execution

redis-server RESTORE invalid memory access may allow remote code execution

redis-server Lua use-after-free may allow remote code execution

redis-server use-after-free in unblock client flow may allow remote code execution

Company

Resources

Contact